Fortigate configuration prior to onboarding

[limchee]

Hi team,

Before onboarding to FortiManager, do we need to do any configuration in Fortigate Firewall to facilitate the device communication?

[AEK]

Hello

On the FG interface that will connect to FMG, enable https, ssh and FMG-access.

As far as I remember it is recommended to manage the FG (from FMG) from an interface other than mgmt interface. I guess because sometimes in HA mode mgmt interface is configured as dedicate interface.

[ssteo]

Hello limchee,

You can refer link below:

https://community.fortinet.com/t5/FortiManager/Technical-Tip-How-to-register-a-FortiGate-to-a-FortiM...

[sw2090]

I don't think you need https access on the FGT.

Also I'd recommend to make sure that FMG-access is enabled only on one interface. I had issues when there was more then one interface with FMG-access enabled.